News for hackers. Stuff that matters.

slashcrypto

slashcrypto on Hacker News

Re:Sophisticated Phishing Using Homograph Attacks on Wednesday May 22, 2019 @10:33AM (#19981585)
They said, that they are looking into it ...
Re:Google Bug Bounty – The $5k Error Page on Thursday May 18, 2017 @04:41PM (#14370914)
Would be very interesting to know what SFFE means ;)

Ask HN: GSM encryption suppression

Posted by slashcrypto on Tuesday April 18, 2017 @02:37PM
from the ask-hn dept.

I already asked the question here but have not got any answers... https://security.stackexchange.com/questions/157316/gsm-encryption-suppressionThe following papers explain that it is possible to suppress the encryption (or downgrade) in GSM using faked...

( Read More... | no comments | on HN )
Re:Why the “WhatsApp-backdoor” is not a WhatsApp-backdoor on Friday January 13, 2017 @09:26AM (#13390982)
I edited this part, you are definitely right.
Re:Why the “WhatsApp-backdoor” is not a WhatsApp-backdoor on Friday January 13, 2017 @09:26AM (#13390973)
I edited the article because I really missed this point, you are right. I thought WhatsApp is not sending the message which got encrypted with the new key. But still, I would not say this is a backdoor, because the user has a relatively easy way to check the keys. If WhatsApp would like to implement a backdoor, they would have done it in a different way I think.
Re:Ebay posts every character a user types into the password box on Wednesday June 29, 2016 @07:56AM (#12001016)
you got a point, i will do a short edit here.
Re:Ebay posts every character a user types into the password box on Wednesday June 29, 2016 @07:41AM (#12000951)
what do you mean? normally passwords are not stored in logfiles ...
Re:Ebay posts every character a user types into the password box on Wednesday June 29, 2016 @07:39AM (#12000937)
As I said in the Post, it is not a security vulnerability itself, but I want to point out that it can be very dangerous to put a password in a GET request. And the response of ebay is bad too. But thank you for your constructive comment ;)